Effective date: 21 February 2026

1. Purpose and Scope of This Notice

The purpose of this Privacy Policy is to define the lawful and transparent framework for the processing of personal data by CERTIPONT Kft. (hereinafter: “Controller”) in connection with the operation of the website https://certipont.hu and related services.

This Policy ensures compliance with:

  • Regulation (EU) 2016/679 (GDPR)
  • Hungarian Act CXII of 2011 (Info Act)
  • Hungarian Act CVIII of 2001 (E-commerce Act)
  • Hungarian Accounting Act C of 2000
  • Other applicable EU and Hungarian legislation

This Policy applies to all personal data processed:

  • During website visits
  • During registration
  • During course purchases
  • During exam voucher purchases
  • During communication and support
  • During marketing activities

2. Data Controller Information

Company Name: CERTIPONT Kft.
Registered Office: 1196 Budapest, Báthory utca 126., 1st floor, door 5
Company Registration Number: 01-09-453581
Tax Number: 32997354-1-43
Email: info@certipont.hu
Phone: +36 30 849 9503

Supervisory Authority: Hungarian Central Statistical Office

According to Article 37 GDPR, the Controller is not required to appoint a Data Protection Officer.

3. Fundamental Data Protection Principles

The Controller processes personal data in accordance with Article 5 GDPR principles:

  • Lawfulness, fairness, transparency
  • Purpose limitation
  • Data minimization
  • Accuracy
  • Storage limitation
  • Integrity and confidentiality
  • Accountability

The Controller maintains internal data processing records in accordance with Article 30 GDPR.

4. Categories of Data Processed

4.1 Website Visitors

Categories of data:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Referrer URL
  • Timestamp
  • Page interaction data

Purpose:

  • Website functionality
  • Security
  • Analytics
  • Performance optimization

Legal basis:

  • Article 6(1)(a) GDPR – consent (analytics/marketing)
  • Article 6(1)(f) GDPR – legitimate interest (security)

Retention:

  • Until browser session ends (essential)
  • According to cookie duration (analytics)

4.2 Registered Users

Data:

  • First name
  • Last name
  • Email address
  • Account credentials

Purpose:

  • User account creation
  • Service access
  • Course management

Legal basis:

  • Article 6(1)(b) GDPR – performance of contract

Retention:

  • Until account deletion

4.3 Customers (Course / Exam Purchase)

Data:

  • Full name
  • Email address
  • Billing address
  • Tax number (if applicable)
  • Payment-related information
  • Order history

Purpose:

  • Contract performance
  • Invoicing
  • Exam scheduling
  • Customer support

Legal basis:

  • Article 6(1)(b) GDPR – contractual necessity
  • Article 6(1)(c) GDPR – legal obligation (Accounting Act)

Retention:

  • Contract data: 5 years
  • Accounting documents: 8 years

4.4 Contact and Inquiries

Data:

  • Name
  • Email
  • Phone number (if provided)
  • Message content

Purpose:

  • Providing information
  • Handling requests
  • Complaint management

Legal basis:

  • Article 6(1)(a) GDPR – consent
  • Article 6(1)(f) GDPR – legitimate interest

Retention:

  • Up to 5 years

5. Data Processors and Third Parties

The Controller uses the following processors:

Hosting Provider:
Rackhost Zrt.
6722 Szeged, Tisza Lajos körút 41.
Email: info@rackhost.hu
Phone: +36 1 445 1200
Purpose: hosting infrastructure

Website Technology Providers:

  • WordPress (CMS)
  • WooCommerce (e-commerce platform)
  • Elementor (page builder)
  • WPML (multilingual system)
  • WP Rocket (performance optimization)

Payment Provider:

  • OTP SimplePay (online payments)

Invoicing Software:

  • Számlázz.hu

Analytics & Marketing:

  • Google LLC (Google Analytics, Search Console, Ads)
  • Meta Platforms Inc. (Facebook Pixel, advertising services)

Authorities (if legally required):

  • NAV
  • NAIH
  • Hungarian courts

Data may be transferred to third countries (USA) under Standard Contractual Clauses or other GDPR-compliant safeguards.

6. Cookies and Tracking Technologies

The website uses cookies including:

Essential cookies
Analytics cookies:

  • _ga
  • _gid
  • _ga_N43FV7SFND
  • _ga_PQTCKEXTGR
  • _gat_gtag_UA

Marketing cookies:

  • Facebook Pixel
  • Google Ads cookies

Users provide consent via cookie banner.

Legal basis:

  • Article 6(1)(a) GDPR – consent
  • Article 6(1)(f) GDPR – legitimate interest (essential cookies)

7. Rights of Data Subjects

Under GDPR, data subjects have the right to:

✓ Access personal data
✓ Rectification
✓ Erasure (“right to be forgotten”)
✓ Restriction of processing
✓ Data portability
✓ Object to processing
✓ Withdraw consent at any time
✓ Lodge complaint with supervisory authority

Requests can be sent to: info@certipont.hu

Response time:
Within 30 days (extendable by additional 60 days if justified).

8. Complaint and Supervisory Authority

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

Address: 1055 Budapest, Falk Miksa utca 9-11
Postal: 1363 Budapest, Pf.: 9
Phone: +36 (1) 391-1400
Website: https://naih.hu

Data subjects may also initiate court proceedings.

9. Automated Decision-Making

The Controller does not perform:

  • Automated decision-making
  • Profiling with legal effects
  • High-risk AI processing

10. Data Security Measures

The Controller applies appropriate technical and organizational measures, including:

  • SSL encryption
  • Password protection
  • Firewall protection
  • Malware scanning
  • Access control restrictions
  • Staff training
  • Secure hosting infrastructure
  • Regular software updates

Data is stored electronically and protected against:

  • Unauthorized access
  • Alteration
  • Disclosure
  • Accidental loss or destruction

11. Legal Framework

Main governing legislation:

  • GDPR (EU 2016/679)
  • Hungarian Info Act (CXII/2011)
  • Hungarian Civil Code (V Act of 2013)
  • Hungarian E-Commerce Act (CVIII/2001)
  • Hungarian Accounting Act (C/2000)

12. Amendments

CERTIPONT Kft. reserves the right to amend this Privacy Policy.

The latest version is always available on the website.